Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

b9ab377e00...c9.apk

android-9-x86

8

amap_resou..._0.apk

android-9-x86

amap_resou..._0.apk

android-10-x64

amap_resou..._0.apk

android-11-x64

autonavi_R..._0.apk

android-9-x86

autonavi_R..._0.apk

android-10-x64

autonavi_R..._0.apk

android-11-x64

Analysis

  • max time kernel
    2955040s
  • max time network
    141s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    24/12/2023, 02:08

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b9ab377e00c725f3c1312c96df65e7e1d1a0248021618b55715eebfcf3f15cc9.apk

  • Size

    26.0MB

  • MD5

    bd9dbe009406f79fc0f94b97bfa9fe80

  • SHA1

    26314844b87bcd9aad187cfc6087cc42d3171a3f

  • SHA256

    b9ab377e00c725f3c1312c96df65e7e1d1a0248021618b55715eebfcf3f15cc9

  • SHA512

    2a50940584d1e56462c692d10bfea2fb1e755d09a57b53c52214f97063624d074f8210feb55d78e6cff91e99248f0c80448bd9cb6103ed2b0d4d4d5e6cddf2ee

  • SSDEEP

    786432:wOa4VBBz/JtZbsLhIeqZTo1IlpMq+frGOfpCjx:za4VBN/JvbKUZBlOqOuN

Score
8/10
banker

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
    banker
  • Reads information about phone network operator.

Processes

  • com.jiatingjiaoyu.hoi
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    PID:4262
  • com.jiatingjiaoyu.hoi:remote
    1⤵
      PID:4378

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /storage/emulated/0/UZMap/A6007322244102/home_school.db
      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

      Download Submit

    • /storage/emulated/0/UZMap/A6007322244102/home_school.db-journal
      Filesize

      512B

      MD5

      ec6b9012cf1f9d63a1c58c77712de11c

      SHA1

      fe32010fd3f925fe0f64db67b60ccdb3105221c2

      SHA256

      d1808d38aa55f5a20e7a14b4abeda5772621eedd2927d702a22a312035cbd18a

      SHA512

      a9101b6992d739af42bf2b556301ad22c1757bd403a3c4bdfd59e3e6fd5316be4b731a2d30cfb5e0514d089d1cd35bb2c78fe5b722f28e23c3e677cd869b66f2

      Download Submit

    • /storage/emulated/0/UZMap/A6007322244102/home_school.db-shm
      Filesize

      28KB

      MD5

      cf845a781c107ec1346e849c9dd1b7e8

      SHA1

      b44ccc7f7d519352422e59ee8b0bdbac881768a7

      SHA256

      18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

      SHA512

      4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

      Download Submit

    • /storage/emulated/0/UZMap/A6007322244102/home_school.db-wal
      Filesize

      16KB

      MD5

      bb517d98ad4b6d133af9cb1e10d01d21

      SHA1

      0948982187d140380cc407ea047d56d475684c5f

      SHA256

      862723c6648d145d5f5ed41b3bf4d886f7b51cd6ab82a78843293dee897a9d81

      SHA512

      9fdd27c01b42401f84777c5ab885020af88e0b2e27b4df46eaa8a66995c3ee347a39761e14f9b9288e8caa86814df5990b512af99ce08ecbdc0f002c669a3f0c

      Download Submit